Isaca CDPSE Exam - Topic 8 Question 7 Discussion

Actual exam question for Isaca's CDPSE exam

Question #: 7
Topic #: 8

An organization is planning a new implementation for tracking consumer web browser activity. Which of the following should be done FIRST?

ASeek approval from regulatory authorities.

BConduct a privacy impact assessment (PIA).

CObtain consent from the organization's clients.

DReview and update the cookie policy.

Show Suggested Answer

Suggested Answer: A

by Fernanda at May 06, 2022, 03:55 AM

Limited Time Offer

25%

Off

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lorrine

7 months ago

I'm surprised they aren't considering user consent first!

upvoted 0 times

...

Malcom

7 months ago

Reviewing the cookie policy seems like a good start too.

upvoted 0 times

...

Corinne

7 months ago

Wait, shouldn't they get regulatory approval first?

upvoted 0 times

...

Gerardo

7 months ago

Totally agree, PIA is crucial!

upvoted 0 times

...

Lera

8 months ago

I think a privacy impact assessment should be first.

upvoted 0 times

...

Lezlie

8 months ago

Reviewing the cookie policy sounds important, but I feel like we should assess privacy risks before that. Is that right?

upvoted 0 times

...

Darrel

8 months ago

I practiced a similar question, and I think obtaining client consent might come after the PIA. But I'm not completely confident about the order.

upvoted 0 times

...

Loreen

8 months ago

I'm not entirely sure, but I remember something about needing regulatory approval first. It feels like that would be a priority.

upvoted 0 times

...

Tresa

8 months ago

I think the first step should be conducting a privacy impact assessment. It seems crucial to understand the implications before moving forward.

upvoted 0 times

...

Laquanda

8 months ago

Okay, I've got this. Microsoft Stream is a video sharing and management platform within Microsoft 365. I know the key features, so I should be able to nail this question.

upvoted 0 times

...

Ruth

8 months ago

I think the correct answer is C - low impact incidents should be resolved efficiently to reduce the required resources. That makes the most sense to me.

upvoted 0 times

...

Inocencia

8 months ago

I'm a bit confused. If a service isn't handling sensitive info, would it still require encryption under this pattern?

upvoted 0 times

...